High Availability

Control-M High Availability enables you to maximize your production environment uptime and prevent data loss in the event of hardware maintenance or failure.

Control-M supports the following high availability solutions:

• Control-M/EM and Control-M/Server High Availability with Oracle/MSSQL/External PostgreSQL: Enables you to set up a secondary host with Control-M/EM or Control-M/Server. If there is a hardware failure or if all Control-M/EM or Control-M/Server processes are down unexpectedly, the secondary automatically (by default) or manually assumes control and resumes production.

• Control-M/Server High Availability with a Dedicated BMC PostgreSQL: Enables you to set up a secondary Control-M/Server and a secondary PostgreSQL database server for database replication. If the primary Control-M/Server and database server are down, you can manually fail over to the secondary host.

To set up your High Availability environment, you must do the following:

• Install or use an existing Control-M/EM, Control-M/Server, or a Control-M full installation, as described in Control-M full installation, Control-M/Enterprise Manager installation, and Control-M/Server installation. If you want to configure High Availability using an External PostrgeSQL server, you must install a fresh installation of Control-M/EM or Control-M/Server. You cannot upgrade because the previous installations are using a dedicated PostgreSQL server and BMC does not provide a way to remove it.

• Install a secondary Control-M/EM, Control-M/Server, or a Control-M full installation, as described in High Availability Installation.

Control-M High Availability on One Host

To ensure that Control-M continues to run when it is installed on one host, the Control-M/EM and Control-M/Server Configuration Agent monitor and manage the following components in the CCM:

• Control-M/Server

• GUI Server (GSR)

• Gateway (GTW)

• Global Condition Server (GCS)

• Batch Impact Manager Server (BIM)

• Forecast Server

• Self Service Server

• Web Server

• Configuration Manager Server (CMS)

• Naming Service

• PostgreSQL database server

• Workload Archiving Server

• Services Configuration Agent

The Services Configuration Agent runs on all installations, such as primary, secondary, and distributed. The Control-M/EM Configuration Agent verifies that the Services Configuration Agent is always up. On the Non-Active host, it verifies that all other services are stopped. The Control-M/EM services (Service Health Monitor, Reporting Facility, Validation Service, Zookeeper, Kafka, and Protocol Translator) run only on the Active machine and are shutdown if there is a manual failover by the Services Configuration Agent.

If a Control-M/EM or Control-M/Server component goes down, the Configuration Agent attempts to start it up (if desired state is Set to Up), based on defined intervals, as described in Maintenance Parameters and High Availability Parameters.

If you are using a PostgreSQL database, the Configuration Agent manages the database component and sends a life check every defined interval (see Maintenance Parameters and High Availability parameters ). If there is no response after a defined number of attempts, the Configuration Agent restarts the database automatically. If you are using an Oracle or MSSQL database, you can view the database component in the CCM, but the Configuration Agent does not manage the component and cannot start it up or shut it down.